Connection HTTPS / HTTP and SSH not working

[Nicu21]

I can't connect via SSH HTTP or HTTPS to my PA-500 firewall .

I can ping it from my network and that's all .

Also , the strange thing it is that from panorama the device is reachable 

I have checked the traffic -> is allow

I have checked management interface -> is allowing my IP addresses + HTTPS SSH and HTTP are ticked .

What else could be the issue ?

[MP18]

@Nicu21 

Are you using Management Interface of PA to ssh it?

Is your IP address from which you are trying to ping is in allowed list?

Regards

[BPry]

@Nicu21,

In addition to what @MP18 already mentioned, I would look and see if you don't have a service route configured to allow Panorama traffic and if that's actually using your management interface or not. 

Enabling access to the management interface is straightforward and should be working with what you have described if you have committed the configuration and are attempting to connect to the proper IP address. 

[Nicu21]

Are you using Management Interface of PA to ssh it? -> Yes

Is your IP address from which you are trying to ping is in allowed list? -> Yes , it is 

[MP18]

@Nicu21 

Please do PCAP on the MGMT interface while you test the ssh to PA

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleECAS

This will show you if traffic is hitting the PA or not?

Regards

[Nicu21]

I have removed all of the allowed IP from mgmt interface , and then it works .

Practically i dont have an explanation because my IP address was there .

Case is solved , maybe if you can help me with an explanation , why it works after